Where to start for bankbot

[SamuraiNxt]

I want to be a malicious software developer on Android, I know that I have a long way ahead of me, I started with java and kotlin languages.

But I could not find a source on how to create exploit development and malware on Android. When it comes to windows, there are very clear and very good resources, but I think there is a lack of resources on Android.

I know that I should start with java and kotlin and then I am undecided about what to continue with, I respect all your answers, no matter positive or negative.

I would be really grateful if there is a resource you can offer me about Android malicious software development, thank you.

 

[SamuraiNxt]

Since Kotlin and Android development is between other languages, I felt the need to open the topic here, but the admins can change or move the topic as they wish, I apologise if I made any mistakes.

 

[RedNode]

you ask for exploit and malware developments these are 2 different topics, to develop malware for Windows or Android or other system you have to understand the malware and what is malware what is the different between malware and legit software
for example on Android:
1 - WhatsApp legit software uses microphone and camera and access to the studio so you can make voice calls or send voice messages, send pictures from phone storage
2 - these future are also available on some malware the difference is the malware can use them to spy on a target

so if you know java/kotlin you can write Android malware you dont need any resources if you can build Android app can access the microphone then you can write malware the last thing here you want to do is send the voice over network

You see it's easy you just need to think

 

[voldemort]

you ask for exploit and malware developments these are 2 different topics, to develop malware for Windows or Android or other system you have to understand the malware and what is malware what is the different between malware and legit software
for example on Android:
1 - WhatsApp legit software uses microphone and camera and access to the studio so you can make voice calls or send voice messages, send pictures from phone storage
2 - these future are also available on some malware the difference is the malware can use them to spy on a target

so if you know java/kotlin you can write Android malware you dont need any resources if you can build Android app can access the microphone then you can write malware the last thing here you want to do is send the voice over network

You see it's easy you just need to think

Whatsapp is also a Malware the only difference is maintain by a big corporation

 

[RedNode]

Whatsapp is also a Malware the only difference is maintain by a big corporation

yes true , whatsapp collect data and intelligence but what i was just giving example

 

[0xc83736]

*starwars joke* these are not the resoureces you are looking for..... *starwars joke*


now serious talking,

you are wanting to create malware for android devices, this is exactly the same concept as if for windows or any other devices.
first you must know what you want to acheive and what data you are looking to collect, Malware/Exploit is not that it is a tool that you use to collect that data.

from your title you are wanting bankbot, the steps for this would be as follows.


1- How will you comunicate with your bot, this is the same as for any legitimate application that sends data to legitimate companies (whatsapp example above is good)
2- What is the Data you are looking for, in this case i would guess the banking details are available from each app for each bank you wish to target only when they are being input.
3- How will you interact with these applications to be able to intercept, you could use fake overlay, keylog, screenrecord or likely many other methods as android is not my area of expert knowledge
4-Now you know how you would like to capture your target data, you can start investigating the flow for each bank app.

now when you combine these small induvidual tasks that are not complex on their own, you are left with a single application that does the following.

- communicates with you in some way
- Identify's the data you are looking for
- extracts that data
- sends that data to you

hopefully this helps your big challenge and breaks into multiple smaller easier tasks.
all the resources you will likely need are just regular documentation, think android equivilent of MSDN.


Good Luck with your Project
-0xc

 

[n1k7]

There isn't resources that are lacking for Android, it's just you're searching for it well.

I suggest getting yourself familiar with the coding language's first, from the way you speak. It seems that you're very new to Java/Kotlin, so the advice will be to write few programs and find out how everything works out in the Android System.

Anyways, good luck